ZyXEL Communications ZyWALL USG-Series - Signature Search Anti-Virus Command

Chapter 33 Anti-Virus
ZyWALL / USG (ZLD) CLI Reference Guide
222
33.2.3.1 White and Black Lists Example
This example shows how to enable the white list and configure an active white list entry for files
with a .exe extension. It also enables the black list and configure an inactive black list entry for files
with a .exe extension.
33.2.4 Signature Search Anti-virus Command
The following table describes the command for searching for signatures. You must use the
configure terminal command to enter the configuration mode before you can use this
command.
33.2.4.1 Signature Search Example
This example shows how to search for anti-virus signatures with MSN in the name.
[no] anti-virus black-list file-pattern
av_file_pattern {activate|deactivate}
Adds or removes a black list file pattern. Turns a file pattern on or off.
anti-virus black-list replace
old_av_file_pattern new_av_file_pattern
{activate|deactivate}
Replaces the specified black list file pattern with a new file pattern.
Table 122 Commands for Anti-virus White and Black Lists (continued)
COMMAND DESCRIPTION
Router(config)# anti-virus white-list activate
Router(config)# anti-virus white-list file-pattern
Router(config)# anti-virus white-list file-pattern *.exe activate
Router(config)# anti-virus black-list activate
Router(config)# anti-virus black-list file-pattern *.exe deactivate
Router(config)# show anti-virus white-list status
anti-virus white-list status: yes
Router(config)# show anti-virus white-list
No. Status
File-Pattern
===========================================================================
1 yes
*.exe
Router(config)# show anti-virus black-list status
anti-virus black-list status: yes
Router(config)# show anti-virus black-list
No. Status
File-Pattern
===========================================================================
1 no
*.exe
Table 123 Command for Anti-virus Signature Search
COMMAND DESCRIPTION
show anti-virus search signature {
all | name virus_name} [{from id to
id}]
Searches for signatures by name.Type the ID or part of the ID that you want
to find.
Router(config)# anti-virus search signature name MSN
signature: 1
virus name: MSN